This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
File: f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json)
Hash identifier: 9wcoDLVmiHINqKOrmcUeDMFCfpk400W1NNeHCHL6qrI=
Subject key identifier: 9B:2F:BA:1C:27:35:A0:B1:D7:93:A2:E3:28:97:28:E3:4E:B3:B7:C6
Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3
Certificate issuer: /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
Certificate serial: 09EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
Manifest number: 09E2
Signing time: Sat 06 Dec 2025 19:08:04 +0000
Manifest this update: Sat 06 Dec 2025 19:08:04 +0000
Manifest next update: Sat 13 Dec 2025 19:08:04 +0000
Files and hashes: 1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: EfRqfIVyV+Sa9o8Etf0c714Xhnr03IRKluA85hyWUJ8=)
2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: 0mkhd4eAuT9/naCzlV+KcaUe14bdcrlkm0xwSgwQ4wY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl
rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2538 (0x9ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
Validity
Not Before: Dec 6 19:08:04 2025 GMT
Not After : Dec 13 19:08:04 2025 GMT
Subject: CN=69347f14-ecb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:df:66:cd:95:f5:32:53:32:92:c9:cb:2e:
0a:d0:01:7f:45:b2:bd:ab:7b:50:80:8c:5c:46:c7:
b2:1d:5c:58:32:66:68:1a:a3:96:ed:5f:dc:54:3d:
ca:22:3b:c1:b9:d3:30:eb:3c:7f:37:9b:0b:4c:4a:
53:6a:f5:c8:d7:a4:c4:6e:cc:c8:b2:01:36:d5:f2:
a6:16:d9:29:13:b0:5c:a9:d8:77:2c:cd:43:4f:3b:
a2:6f:c7:b7:cf:0a:35:9a:4a:68:2c:c1:8e:08:ab:
da:77:87:8c:1c:0b:b0:49:4d:ef:32:0a:a5:66:75:
a1:22:04:cc:58:d4:5d:a0:ee:c0:51:97:51:fb:8f:
5d:4a:92:bd:07:de:b0:37:9d:48:d2:11:e9:95:13:
4c:ff:c5:94:67:cf:12:14:5a:20:72:fa:64:8e:e9:
af:fe:43:44:ff:3b:e6:41:af:6f:21:b9:ee:c7:ba:
92:fa:00:6a:54:2b:b6:97:c1:f8:6c:29:0e:58:01:
e2:38:02:19:73:69:17:56:9e:03:2d:14:9d:de:99:
aa:15:2e:ed:f1:89:30:09:a0:52:ea:4d:b2:99:47:
55:1a:61:37:b6:f6:7d:86:ee:6a:2f:d5:35:3e:b8:
f1:5a:80:18:72:db:94:83:bb:21:c8:61:63:b3:a0:
ad:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2F:BA:1C:27:35:A0:B1:D7:93:A2:E3:28:97:28:E3:4E:B3:B7:C6
X509v3 Authority Key Identifier:
keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:06:c3:74:12:7a:a5:34:a0:0a:de:22:a6:82:99:ad:35:69:
de:d6:af:39:7f:4b:05:1a:f5:dd:68:d8:a0:4e:e7:23:9d:5d:
b3:ef:2f:4c:bf:70:c9:0a:89:59:d2:d7:61:56:db:98:42:7e:
ef:4b:b6:89:a2:9d:cc:a4:1f:82:f5:58:19:7e:eb:6f:26:f3:
af:dd:d1:79:86:c5:c9:7a:85:ba:bc:8c:0f:9c:bc:be:48:35:
cf:57:74:ee:74:74:85:94:11:cb:f2:20:37:19:23:ff:68:1b:
3e:6b:c4:8e:4f:73:42:77:eb:fd:8c:9e:4b:77:f9:87:d6:62:
eb:2e:d9:ea:88:83:68:0a:a4:3c:ae:1f:bc:7e:cb:4e:e9:30:
57:29:fd:e8:78:3c:6a:95:e3:75:5d:c1:61:79:52:61:c2:12:
84:4e:bd:57:64:88:51:67:51:2d:f1:78:13:fb:c9:49:87:30:
1a:80:5e:b5:7f:b0:c8:9b:07:21:4f:a4:fc:ce:20:e6:a0:88:
ce:c2:2d:71:00:82:93:59:9b:5f:88:0b:51:b2:4d:63:b7:29:
b0:b5:70:7e:39:a5:8b:fd:8e:9f:84:67:12:39:58:20:b3:e7:
cf:db:0f:0d:ac:16:b8:58:97:e0:3b:eb:3e:8b:aa:31:65:de:
ad:d8:6d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:47:38 2025 by rpki-client